syzkaller login: [ 38.712246] kauditd_printk_skb: 10 callbacks suppressed [ 38.712251] audit: type=1400 audit(1582210590.705:36): avc: denied { map } for pid=7088 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 39.339539] IPVS: ftp: loaded support on port[0] = 21 [ 39.752716] can: request_module (can-proto-0) failed. [ 40.801268] can: request_module (can-proto-0) failed. [ 40.810188] can: request_module (can-proto-0) failed. [ 40.985049] audit: type=1400 audit(1582210592.985:37): avc: denied { create } for pid=7088 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 41.008652] audit: type=1400 audit(1582210592.985:38): avc: denied { create } for pid=7088 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 41.033172] audit: type=1400 audit(1582210592.985:39): avc: denied { create } for pid=7088 comm="syz-fuzzer" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 Warning: Permanently added '10.128.10.30' (ECDSA) to the list of known hosts. 2020/02/20 14:56:39 parsed 1 programs 2020/02/20 14:56:40 executed programs: 0 [ 48.273882] IPVS: ftp: loaded support on port[0] = 21 [ 48.388532] IPVS: ftp: loaded support on port[0] = 21 [ 48.389131] IPVS: ftp: loaded support on port[0] = 21 [ 48.396604] IPVS: ftp: loaded support on port[0] = 21 [ 48.400486] IPVS: ftp: loaded support on port[0] = 21 [ 48.466676] chnl_net:caif_netlink_parms(): no params data found [ 48.528890] IPVS: ftp: loaded support on port[0] = 21 [ 48.576399] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.583828] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.590937] device bridge_slave_0 entered promiscuous mode [ 48.607955] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.614579] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.621626] device bridge_slave_1 entered promiscuous mode [ 48.659479] chnl_net:caif_netlink_parms(): no params data found [ 48.678481] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 48.689251] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 48.723025] chnl_net:caif_netlink_parms(): no params data found [ 48.764970] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 48.772926] team0: Port device team_slave_0 added [ 48.786337] chnl_net:caif_netlink_parms(): no params data found [ 48.805994] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 48.813620] team0: Port device team_slave_1 added [ 48.822611] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 48.847700] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.854721] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.861688] device bridge_slave_0 entered promiscuous mode [ 48.868493] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 48.889680] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.897826] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.905195] device bridge_slave_0 entered promiscuous mode [ 48.912044] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.918869] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.926139] device bridge_slave_1 entered promiscuous mode [ 48.959747] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.966925] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.974064] device bridge_slave_0 entered promiscuous mode [ 48.980830] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.989047] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.996141] device bridge_slave_1 entered promiscuous mode [ 49.003796] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.055424] device hsr_slave_0 entered promiscuous mode [ 49.102817] device hsr_slave_1 entered promiscuous mode [ 49.175135] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.181546] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.189920] device bridge_slave_1 entered promiscuous mode [ 49.199251] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.218926] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.229254] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.237618] audit: type=1400 audit(1582210601.235:40): avc: denied { write } for pid=7185 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 49.245251] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.268577] audit: type=1400 audit(1582210601.265:41): avc: denied { read } for pid=7185 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 49.270475] team0: Port device team_slave_0 added [ 49.299556] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.306981] team0: Port device team_slave_1 added [ 49.315396] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.324006] chnl_net:caif_netlink_parms(): no params data found [ 49.333197] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.350704] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.358478] team0: Port device team_slave_0 added [ 49.365625] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 49.373997] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.383562] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 49.393917] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.407637] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.415433] team0: Port device team_slave_1 added [ 49.421294] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.451876] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.462584] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 49.469910] team0: Port device team_slave_0 added [ 49.476736] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 49.484645] team0: Port device team_slave_1 added [ 49.515298] device hsr_slave_0 entered promiscuous mode [ 49.552804] device hsr_slave_1 entered promiscuous mode [ 49.607614] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.618610] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.641501] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.648052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.655304] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.661708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.669773] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 49.680815] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.688181] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.744117] device hsr_slave_0 entered promiscuous mode [ 49.782785] device hsr_slave_1 entered promiscuous mode [ 49.857266] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 49.864280] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 49.872178] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 49.882884] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.889271] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.896897] device bridge_slave_0 entered promiscuous mode [ 49.906366] chnl_net:caif_netlink_parms(): no params data found [ 49.922150] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.928803] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.935997] device bridge_slave_1 entered promiscuous mode [ 50.004085] device hsr_slave_0 entered promiscuous mode [ 50.042772] device hsr_slave_1 entered promiscuous mode [ 50.103330] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.111443] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.130461] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.144013] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.153564] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.176188] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.188420] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.195884] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.203385] device bridge_slave_0 entered promiscuous mode [ 50.217684] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.225236] team0: Port device team_slave_0 added [ 50.230983] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.238731] team0: Port device team_slave_1 added [ 50.244578] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.253204] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.305250] device hsr_slave_0 entered promiscuous mode [ 50.372833] device hsr_slave_1 entered promiscuous mode [ 50.422907] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.429311] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.436652] device bridge_slave_1 entered promiscuous mode [ 50.452422] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 50.464880] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.479160] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 50.499334] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.508782] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 50.523337] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 50.530966] team0: Port device team_slave_0 added [ 50.541541] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 50.550280] team0: Port device team_slave_1 added [ 50.566095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.577422] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.584259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.591009] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.597424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.605671] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 50.616932] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 50.684109] device hsr_slave_0 entered promiscuous mode [ 50.722782] device hsr_slave_1 entered promiscuous mode [ 50.804280] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 50.824332] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.832087] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.839331] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.857806] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 50.871647] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.879600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.890174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.905110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.916722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.926637] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 50.936076] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 50.945711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.956140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.965510] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.971599] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.981647] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 50.988096] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.995853] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 51.009417] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.022217] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.029705] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.038097] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.052426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.059745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.067458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.074716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.082429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.090234] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.096795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.104941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.113130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.121354] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.127812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.135028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.144663] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.150759] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.161627] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.173524] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.182053] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.193044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.200823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.208688] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.215099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.223710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.231525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.239319] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.245722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.255482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.265077] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.273309] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.281882] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.291995] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.301401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.310880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.318667] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.325053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.331894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.339661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.347491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.355287] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.361633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.368496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.376475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.384426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.393189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.401589] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.410774] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.419082] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.428902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.438274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.446500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.453714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.464699] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.472083] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 51.493828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.504374] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.513446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.521140] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.531198] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.538589] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.550470] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.558038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.565259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.572114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.580406] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.588116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.596549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.605280] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.612292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.619393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.627253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.636036] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 51.645353] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.654196] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 51.660278] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.668708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.676191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.684399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.691947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.700076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.708103] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.714554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.721672] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.729775] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 51.738311] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 51.748059] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.757235] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.769152] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 51.775825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.784704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.792429] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.798892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.807680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.819069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.826820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.834881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.842534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.849479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.858408] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 51.869840] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 51.877929] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 51.890618] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.898819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.907290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.919172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.928164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.936282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.944305] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.950672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.957610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.965605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.975259] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 51.983438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.990544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.998368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.009630] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.021174] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.030455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.039154] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.049797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.061200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.069385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.077296] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.083724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.090487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.098274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.106217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.113962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.123831] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 52.130174] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.138441] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.149679] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.158966] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.169196] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.177724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 52.186295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.194380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.201938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.209778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.217773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.225452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.234451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.241905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.249778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.257806] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.264274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.271406] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.278570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.292312] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.302274] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.308877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.318373] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.328934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.338327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.346404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.354331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.362619] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.370030] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.376348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.386579] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.395634] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 52.407307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.415442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.423524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.431237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.439128] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.445515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.453657] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 52.461840] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.470300] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.480016] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.488065] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 52.499620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.506624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.513469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.520975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.530453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.538172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.545879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.557996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.569055] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.579817] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 52.588477] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 52.596441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.605109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.612396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.621921] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.632971] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.639011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.648971] audit: type=1400 audit(1582210604.645:42): avc: denied { associate } for pid=7192 comm="syz-executor.4" name="syz4" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 52.674657] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.684139] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 52.700640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.708347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.716674] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.724062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.730737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.738559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.746624] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.755071] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 52.763242] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.770204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 52.780124] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 52.791395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.802116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.811122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.819349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.827736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.836258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.844044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.853337] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.859362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.868157] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 52.878977] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 52.899445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.910274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.926961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.940026] ------------[ cut here ]------------ [ 52.940223] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 52.945636] refcount_t: underflow; use-after-free. [ 52.967352] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 52.974306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.984918] WARNING: CPU: 1 PID: 7207 at lib/refcount.c:187 refcount_sub_and_test_checked+0x15a/0x180 [ 52.994287] Kernel panic - not syncing: panic_on_warn set ... [ 52.994287] [ 53.001628] CPU: 1 PID: 7207 Comm: syz-executor.4 Not tainted 4.19.105-syzkaller #0 [ 53.009402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.019535] Call Trace: [ 53.022122] dump_stack+0x123/0x177 [ 53.025744] ? refcount_sub_and_test_checked+0x15a/0x180 [ 53.031186] panic+0x1cd/0x375 [ 53.034359] ? __warn_printk+0xd6/0xd6 [ 53.038239] __warn.cold.8+0x1b/0x3e [ 53.041953] ? refcount_sub_and_test_checked+0x15a/0x180 [ 53.047412] report_bug+0x1a4/0x200 [ 53.051045] do_error_trap+0x200/0x350 [ 53.054930] ? math_error+0x340/0x340 [ 53.058726] ? irq_work_queue+0x34/0x50 [ 53.062708] ? wake_up_klogd+0x71/0xa0 [ 53.066588] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 53.071420] ? trace_hardirqs_off_caller+0x49/0x180 [ 53.076422] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 53.081273] do_invalid_op+0x1b/0x20 [ 53.084972] invalid_op+0x14/0x20 [ 53.088455] RIP: 0010:refcount_sub_and_test_checked+0x15a/0x180 [ 53.094491] Code: c1 44 29 e0 85 c9 89 c3 74 88 80 3d bc d0 bd 05 00 74 04 31 c0 eb a9 48 c7 c7 00 fd fe 86 c6 05 a8 d0 bd 05 01 e8 19 3b 49 fe <0f> 0b 31 c0 eb 90 4c 89 ff e8 58 11 a1 fe e9 2b ff ff ff e8 de 34 [ 53.113387] RSP: 0018:ffff888093bcf6d0 EFLAGS: 00010282 [ 53.118766] RAX: 0000000000000000 RBX: 00000000ffffff01 RCX: 0000000000000000 [ 53.126306] RDX: 0000000000000004 RSI: ffffffff86ff18a0 RDI: ffffffff89a7f6e0 [ 53.133581] RBP: ffff888093bcf760 R08: ffffed1015d65079 R09: ffffed1015d65078 [ 53.140839] R10: ffffed1015d65078 R11: ffff8880aeb283c7 R12: 0000000000008100 [ 53.148094] R13: ffff888093bcf738 R14: 1ffff11012779edb R15: ffff88808615927c [ 53.155392] ? refcount_inc_checked+0x30/0x30 [ 53.159899] ? refcount_sub_and_test_checked+0xe0/0x180 [ 53.165266] ? refcount_inc_checked+0x30/0x30 [ 53.169760] sock_wfree+0x9b/0x130 [ 53.173289] sctp_wfree+0x345/0x910 [ 53.176909] skb_release_head_state+0xfc/0x200 [ 53.181480] skb_release_all+0xd/0x50 [ 53.185264] consume_skb+0x91/0x270 [ 53.188878] sctp_chunk_put+0x150/0x230 [ 53.192838] sctp_chunk_free+0x3f/0x50 [ 53.196712] __sctp_outq_teardown+0x1a2/0xc30 [ 53.201187] ? __sctp_outq_teardown+0xc30/0xc30 [ 53.205851] ? sock_def_wakeup+0xd7/0x1b0 [ 53.209995] sctp_outq_free+0x9/0x10 [ 53.213714] sctp_association_free+0x1d5/0x711 [ 53.218430] sctp_do_sm+0x1605/0x5020 [ 53.222223] ? sctp_do_8_2_transport_strike.isra.19+0x800/0x800 [ 53.228290] ? __kmalloc_node_track_caller+0x3c/0x70 [ 53.233403] ? rcu_read_lock_sched_held+0x108/0x120 [ 53.238412] ? kmem_cache_alloc_node_trace+0x348/0x730 [ 53.243682] ? __lock_is_held+0xb5/0x140 [ 53.247743] ? memcpy+0x45/0x50 [ 53.251177] ? sctp_addto_chunk+0xfa/0x2a0 [ 53.255413] ? sctp_addto_chunk+0xfa/0x2a0 [ 53.259632] sctp_primitive_ABORT+0x7c/0xc0 [ 53.263943] sctp_close+0x227/0x750 [ 53.267828] ? sctp_init_sock+0x1230/0x1230 [ 53.272135] ? lock_acquire+0x173/0x3d0 [ 53.276093] ? __sock_release+0x7d/0x290 [ 53.280138] inet_release+0xb4/0x1b0 [ 53.283845] __sock_release+0xc2/0x290 [ 53.287723] sock_close+0x10/0x20 [ 53.291282] __fput+0x249/0x7f0 [ 53.294551] ____fput+0x9/0x10 [ 53.297739] task_work_run+0x108/0x180 [ 53.301613] exit_to_usermode_loop+0x1a9/0x200 [ 53.306203] do_syscall_64+0x413/0x4e0 [ 53.310238] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 53.315414] RIP: 0033:0x4141d1 [ 53.318596] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 53.337490] RSP: 002b:00007ffd2bb3fad0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 53.345201] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00000000004141d1 [ 53.352474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 53.359732] RBP: 0000000000000001 R08: ffffffffffffffff R09: ffffffffffffffff [ 53.366995] R10: 00007ffd2bb3fbb0 R11: 0000000000000293 R12: 000000000075bf20 [ 53.374245] R13: 000000000000ce9b R14: 0000000000761400 R15: 000000000075bf2c [ 53.383366] Kernel Offset: disabled [ 53.387079] Rebooting in 86400 seconds..